0xnEm0

Aspiring Bug Bounty Hunter

[H4x0r.DZ @h4x0r_dz]

Hello @deepseek_ai,

I have sent an email to [email protected] regarding a critical vulnerability that could allow attackers to access your database exposing sensitive data including API KEYS. I strongly recommend addressing this issue as soon as possible.

[0xnEm0 @0xnEm0]

@cyber_razz @RitaH80760 Becauusseeeee? 😅

[0xnEm0 @0xnEm0]

@coffinxp7 @tonystubblebine @Medium Is it good practice to ask first if the program is active? 🤔 this scares me

Spending a lot of time and you get ignored

Id like it better if its a duplicate than no response 🤔😅

[0xnEm0 @0xnEm0]

@cyber_razz @RitaH80760 By any chance, what are good VPNs and why

[0xnEm0 @0xnEm0]

I think the answer is to reach out to a CNA.

Follow-up: how?

[0xnEm0 @0xnEm0]

If a company does not take your legal vulnerability disclosure seriously and is critical or has high impact if exploited, how do you disclose it so others can check if they are affected?

Authorized Data Publisher? CVE Numbering Authority (CNA)? CVE Program?

#BugBounty

[daniel @hackermondev]

1 Bug, $50K+ in bounties: how Zendesk left a backdoor in hundreds of companies #bugbountytips
https://t.co/8pkfFsXRWR

[7h3h4ckv157 @7h3h4ckv157]

CVE-2024-49112 🚨🔥

Critical RCE vulnerability affecting the Windows LDAP Client with a CVSS score of 9.8. This vulnerability could allow an unprivileged attacker to run arbitrary code on an Active Directory Server by sending a specialized set of LDAP calls to the server.

🛡️Microsoft recommends that all Active Directory servers be configured to not accept Remote Procedure Calls (RPCs) from untrusted networks in addition to patching this vulnerability.

[Intigriti @intigriti]

Having a bug bounty methodology is crucial!

Here are 4 FREE resources to help you expand your current methodology! 😎

🧵 👇

[KausTubh PaTil @iamrealkaustubh]

Day 1: 0-100k in Bug Bounty
1.Started with Understanding Bug Bounty Platforms
2.Studying OWASP Top 10 (2021)
3. Writing down Http error codes
4. Practising Portswigger academy.

Following and learning from the best
@techycodec08
@Rhynorater

[Justin Gardner @Rhynorater]

All my current bug bounty knowledge is gone.

Here's how I get it back and make $100k in the first year:

First, I've got to learn the basics. For this, I will make sure I understand at a high level how the components I'm working with function.

I'll need to understand...

[Dave Kennedy @HackingDave]

Cybersecurity automation with AI/LLMs is starting to become and will be one of the most desired skillsets in the next 3-5 years in all of security.

[Rodolfo Assis @RodoAssis]

"Super advanced XSS tip used only by Senior Red Team."

300 likes.

That's why we can't have nice things.

[Coffin @lostsec_]

tried something new for the Bug Hunting community i hope this will help in there hunting jurney ❤️
site:https://t.co/eC3MzUgc8e
special thanks to my team @1hehaq and @javxfps to make it more better..

[Coffin @lostsec_]

Best method for Hunting SQL injection on bbp/vdp this oneliner fetch all endpoints that mosty vulnerable to sql like php,asp,aspx,jsp,jspx

[Het Mehta @hetmehtaa]

1)Make Your tools speak.
https://t.co/CCuplHSXT1

2)Law Proving Ground Practice Walkthrough
https://t.co/qiPCrMzAV5

3)HackTheBox Analytics
https://t.co/ztHv05TnKN

4)HackTheBox Topology
https://t.co/yaVyCuXxSi

#bug #bugs #bugbounty #bugbountytip #bugbountytips #hacking #hacker #ethicalhacking #ethicalhacker #ethicalhackers #CyberSecurity

[Manas @ManasH4rsh]

A very good writeup:-

https://t.co/MJuE0bzhVG

[N$🌟 @__nav1n_]

I changed my job for a better opportunity & to stay with my family last month, so I didn't have time to engage in hacking. I only reported 1 bug last month as I was too busy with handovers. I started hacking again last week, and now, three ctits in a row. #bugbounty.

[Ninad Mishra @NinadMishra5]

Bug bounty tip: put a blind XSS payload in your user agent before you fill in a contact form. ;-) #bugbountytips

[Pratik Yadav @pratikyadav7_]

Hi everyone! I have discovered a vulnerability within a rapidly growing NFT marketplace. This vulnerability has the potential to compromise users' NFT wallets, utilizing both (IDOR) and (XSS).

https://t.co/G9WOYAfPYW

#bugbountytip #bugbountytips #infosec #hackerone #nft #Crypto